Solved

Video conference over MSN Messenger behind a firewall

Posted on 2003-11-07
18
270,410 Views
Last Modified: 2013-12-27
Hi,
I have a router/firewall, which I can admin. I meahn, I can forward any port.
I'd like to set up a video conference using MSN Messenger 6. The problem is that it doesn't work, obiously.
Waht are the ports that I should forward in order to setup the video conference and file transfers and other stuff?
0
Comment
Question by:yo0mismo
  • 4
  • 2
  • 2
  • +8
18 Comments
 
LVL 5

Accepted Solution

by:
daJman earned 75 total points
Comment Utility
"Here is a very helpful FAQ from SMC for the barricade, the port settings are specific to MSN Messenger and should work fine on all firewalls and routers, as best Messenger can, "MSN Messenger sends its IP address on the packet. It is a NAT-unfriendly application." (per SMC FAQ)"

"How do I configure the router to work with MSN Messenger?
--------------------------------------------------------------------------------
Here is all the info we have on MSN Messenger:
MSN Messenger

NOTE: Shut off any personal firewall programs such as BlackIce, ZoneAlarm, etc.

Ports 6891-6900 enable File send,
Port 6901 is for voice communications

Allows Voice, PC to Phone, Messages, and Full File transfer capabilities.

IN TCP 6891 - 6900
IN TCP 1863
IN UDP 1863
IN UDP 5190
IN UDP 6901
IN TCP 6901

Try setting 6891,6900, and 6901 as triggers. Then set the public ports to 1863,5190-6901. If that does not work, set the incoming ports to 1-64535 (note: this opens a WIDE range of ports) and add in 5190 and 1863 as triggers. You can also try putting your machine in the DMZ (go into Misc. Items). Make sure that you have upgraded the firmware as well."
http://www.smc.com/index.cfm?sec=Support&pg=FAQ-Details&note_id=207&site=c


http://www.tek-tips.com/gviewthread.cfm/lev2/5/lev3/34/pid/462/qid/546966
0
 
LVL 35

Expert Comment

by:ShineOn
Comment Utility
I wasn't aware that MSN messenger could do *video* conferencing.  Are you talking about some other Microsoft product, like NetMeeting?
0
 

Expert Comment

by:adamkimber
Comment Utility
If you check the router specs, a lot of modern ones support a feature known as uPNP, this means that MSN (and certain other apps), can selectively open the ports they require for the particular use they are being put to.  This works like a temporary port forwarding.  I have used it on a solwise router and it works quite well, with the added benefit that you can always check the router is working becuase it appears in network connections/
0
 
LVL 4

Expert Comment

by:Kokoglen
Comment Utility
Shineon, MSN Messenger 6 does do video conferencing, its basically the netmeeting code re-inserted into a different product.  They are not going to continue the netmeeting line.

MSN Messenger also supports uPnP which basically opens and closes random ports on the fly with a compatible firewall.  It works well and it a slight security risk.

The random port thing is annoying, but is part of the standard it supports.

If you want to avoid this 'feature', look at http://www.eyeballchat.com  Its pretty much the same idea, but uses static IPs so its easier to manage the ports in the firewall.

Also a tremendous resource for MSN messenger is the msnews.microsoft.com newsgroups.  Every answer to every question and highly targeted.  news:microsoft.public.msn.messenger.
0
 

Expert Comment

by:SquaRe48
Comment Utility
Do anyone know what port is used by the Application Sharing?
0
 
LVL 35

Expert Comment

by:ShineOn
Comment Utility
Sorry, SquaRe48, but that sounds like a new question.  This one has already been answered...
0
 

Expert Comment

by:SquaRe48
Comment Utility
Yeah, but that didn't stop you from answering me, did it? :P
0
 

Expert Comment

by:hmoghrabi
Comment Utility
What kind of router is it? if it Linksys you can go to their website and upgrade the router's firmware. The latest one v.1.45.7 allow UPnP automatically so you do not have to setup any ports.
Just go to www.linksys.com and upgarde.
0
 
LVL 35

Expert Comment

by:ShineOn
Comment Utility
My point, SquaRe48, is that you aren't allowed, by the rules of E-E, to piggyback questions onto already-closed questions.  I didn't answer your question, did I?  I responded.
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 

Expert Comment

by:hmoghrabi
Comment Utility
We don't know if he has an SMC router or a linksys. Linksys provides un upgrade that allows all these ports transparently as I mentioned in my previous comment.
0
 
LVL 1

Expert Comment

by:tijsjansen
Comment Utility
Although I would not like to piggyback this question, are none of you concerned with this UPnP feature. The security concerns of any program randomly opening ports in the firewall/router does not seem very appealing to me. If MSN Messenger can do it, why shouldnt a piece of code (virus/trojan) be able to exploit this while the user is still thinking himself protected by a hardware firewall?
For reference, this link, although alarmist, could be useful: http://www.grc.com/unpnp/unpnp.htm
0
 
LVL 4

Expert Comment

by:Kokoglen
Comment Utility
Ive heard it called Plug and Pray.  Yes, its a security risk.  However, it is not the easiest thing in the world to take advantage of.  It is not available on most enterprise quality firewalls.

I think its a bad idea.  EyeballChat has 2 ports it uses.  Why does Microsoft insist on using random ports?  This whole issue would disappear if MS would pick some ports and stick with them.

So I agree it is a security concern, but if you want to use MSN video conferencing, you need it.
0
 
LVL 1

Expert Comment

by:tijsjansen
Comment Utility
Kokoglen, that's very clear.
Enough for me to disable the whole UPnP thing on my and customers routers (as I've been doing in the past year since i've seen the option)
A quick google showed me there were other people (one of them a guy who worked on the protocol) concerned with security flaws.
I'll give EyeBallChat a go!
0
 

Expert Comment

by:sj3vans
Comment Utility
Okay, not to piggyback, but...anyone know where I can get any info using MSN video from behind a Cisco Pix firewall (which I manage)?
0
 
LVL 1

Expert Comment

by:vishalvibhu
Comment Utility
http://searchnetworking.techtarget.com/sDefinition/0,,sid7_gci516602,00.html

Foe videoconferencing u have to use H.323 service already defined on some firewalls(not sure about cisco pix).

If its not theer,,u can look at the above URL to get  an idea about what all ports it uses..

If u want a diteled discussion pls let me knowe.
0
 

Expert Comment

by:Scott659
Comment Utility
I think netmeeting can do it. But you have some trouble with firewalls. Netmeeting is not using port 80 or http forwarding.


Scott Wiseman
<advertizing removed per http:help.jsp#hi106>
0
 

Expert Comment

by:too9slow
Comment Utility
i too have some secuity issues with random port opening and i have a client that is just starting this and i want to steer them in the right direction
0
 
LVL 35

Expert Comment

by:ShineOn
Comment Utility
too9slow, you should start a new question.  Only those Experts that are still subscribed to this question will see that you need help.  A new question will get you lots of attention.

Feel free to include a link to this question in your question.  Tell us exactly what your client's issues are, and how they are set up.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Excessive tcp resends from my ASA 7 23
WAN IP Conflict on Sonicwall 5 55
server plus 2 38
Calyptix AE1200 VLAN Question 3 9
I recently purchased a Bluetooth headset called the Music Jogger (model BSH10). The control buttons on it look like this: One of my goals is to use it as the microphone and speakers for Skype calls. In that respect, it works well. However, I …
#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now